Lucene search
K

541 matches found

Vulnrichment
Vulnrichment
added 2025/10/27 8:37 p.m.2 views

CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS6.3AI score0.00044EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/10/27 8:37 p.m.4 views

CVE-2025-62725

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS9AI score0.00044EPSS
Exploits0
Cvelist
Cvelist
added 2025/10/27 8:37 p.m.3 views

CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS0.00044EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/27 8:19 p.m.3 views

EUVD-2025-36357

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations...

8.9CVSS6.4AI score0.00044EPSS
Exploits0References4
OSV
OSV
added 2025/10/27 8:19 p.m.3 views

GHSA-GV8H-7V7W-R22Q Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS6.8AI score0.00044EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/10/27 8:19 p.m.6 views

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS6.8AI score0.00044EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.3 views

PT-2025-44043

Name of the Vulnerable Software and Affected Versions Docker Compose versions prior to 2.40.2 Description Docker Compose is affected by a path traversal flaw stemming from improper restriction of path names to accessible directories. This issue allows a remote attacker to overwrite arbitrary file...

10CVSS9.3AI score0.00682EPSS
Exploits14References118
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

Docker Compose 路径遍历漏洞

Docker Compose is a Docker open source for defining and running multi-container applications using Docker. A path traversal vulnerability exists in Docker Compose that stems from trusting path information in a remote OCI compose artifact, which could lead an attacker to escape the cache directory...

8.9CVSS9AI score0.00044EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-1162

Malware in sbrugna...

9.8CVSS9.3AI score0.00426EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-19741

Malware in sbrugna...

8.8CVSS8.8AI score0.00052EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2025/10/06 3:47 p.m.178 views

Exploit for CVE-2025-8625

CVE-2025-8625 — PoC Обзор В репозитории храняться исходные...

9.8CVSS7AI score0.0078EPSS
Exploits2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-40746

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00538EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-38103

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00634EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-3143

Malicious code in bioql PyPI...

9.9CVSS6.5AI score0.63142EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-25911

Malicious code in bioql PyPI...

9.4CVSS6.4AI score0.00699EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-25214

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00068EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-41184

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00053EPSS
Exploits0References2
Gitee
Gitee
added 2025/09/13 12:21 a.m.84 views

metasploit-framework

This repository is an offensive tool for Metasploit Framework. It is a collection of files and workflows used to build and test the Metasploit Framework, a penetration testing tool. The repository contains various templates for reporting issues, suggesting new features, and submitting pull...

8.1AI score
Exploits0
Gitee
Gitee
added 2025/09/06 12:9 p.m.89 views

vulhub

This is a pre-built vulnerable environment based on Docker-Compose, provided by the Vulhub project. The repository contains a collection of vulnerable applications and services, along with their corresponding Dockerfiles and configuration files. The vulnerable environments are designed to help...

7AI score
Exploits0
Gitee
Gitee
added 2025/09/06 1:49 a.m.84 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...

10CVSS9.4AI score0.94408EPSS
Exploits116
Rows per page
Query Builder